[Solution] How to fix the "Corrupted NTFS.sys" after installing SP

[Guest]

This should help you fix the corrupted NTFS.sys file problem.

===========================================
Why did this happen?
===========================================

This is caused because Windows tries to boot from a pre-SP2 kernel
(ntoskrnl.exe) and that kernel seeks for pre-SP2 files that got updated by
the SP2 installation, such as Ntfs.sys. And when it tries to load it, it sees
the file is newer than it expected. This could also be caused by a
missing/corrupt Ntfs.sys file tongue.gif, though this is rare, because the
Service Pack 2 installation would not start if the files were corrupted.

===========================================
How can this be fixed?
===========================================
If you used a program that changed the original boot screen: Boot from your
Windows XP CD and log in to your windows installation with the recovery
console. Copy \boot.ini to a floppy drive and edit it with another computer.
Inside, delete /KERNEL=kernel1.exe. This was caused because you used
LogonUIBootRandomizer to set an original and pre-SP2 boot screen
(ntoskrnl.exe).

===========================================
Why did this happen to many slipstreamers?
===========================================
Many slipstreamers combined a custom/old/original ntoskrnl.exe file, that
caused the system not to start (see Why did this happen?)


Hope this helped,
DDRRE (Snir Hassidim)

snir_hass@hotmail.(removethis)com

 

[Phil]

Good info, but when I tried to install sp2 on three different machines that
had modified ntoskrnl files(using style xp boot screens), the sp2 update
would not even start to install. An error comes up and says the ntoskrnl.exe
file has been modified and you need to change it back to continue. It even
gives you the kb article number so you can see how to fix it(with style xp
you just reset the boot.ini and the ntoskrnl.exe file). So if xp2 won't even
begin the install if you have a modified ntoskrnl file then I don't see how
it could corrput ntfs.sys since nothing gets installed until you reset the
ntoskrnl file. Once you reset it, it installs fine.

 

[Phil]

Makes sense. Thanks for the info.

The SP2 installation verifies the loaded kernel, even if its name
isn't ntoskrnl.exe. You can set this parameter:
/KERNEL=CoolKernel.exe and Windows will load that kernel. If that
kernel is an original XP, let's say, SP1 kernel, SP2 setup will scan
it (because it was the kernel used to start Windows) and see that it
wasn't modified. Then, during the installation, it will upgrade
ntoskrnl.exe from SP1 to SP2, but CoolKernel.exe will stay as SP1.
The entry in boot.ini refers to CoolKernel.exe, and Windows SP2 will
use the old kernel to load new files. When you delete the
/KERNEL=CoolKernel.exe parameter, Windows will load SP2's
ntoskrnl.exe, and the system should load properly. Users who think
the problem is with Ntfs.sys ant not with the kernel and copy
Ntfs.sys from their original pre-SP2 CD over their SP2 installation's
Ntfs.sys and manage to load the kernel successfully report a system
crash. That is, probably, because only 2 files are Pre-SP2
(CoolKernel.exe, Ntfs.sys) and the rest are SP2, and a version
mismatch crash occurs.

 

[Guest]

Let's just hope this'll make it to the knowledge base.

 

[Guest]

I recentlly installed SP2 on my destop machine. Install went fine but after
rebooting i get the missing ntfs.sys.
I have tried copying ntfs.sys from the XP installation CD, that solved the
error message I now get the XP boot screen but the system reboots itself each
time. Cannot get into safe mode either.
Suggestions?

 

[Guest]

thanks for the reply. I chcked my boot.ini and it did not contain such a
line. Any other suggestions?

 

[Guest]

Try to retrieve the file called NTFS.sys from an SP2 installation and install
it.

 

[Alex Nichol]

hanks for the reply. I chcked my boot.ini and it did not contain such a
line. Any other suggestions?

I'm not sure what DDRRE thinks he is talking about KERNEL= for, but it
bears no relation I know to Windows XP

You can restore the ntfs.sys from the CD if you have *not* installed one
of the Service Packs. What you have to do is Set the BIOS to boot CD
before Hard Disk. Boot the XP CD and, instead of Setup, take the
immediate R for Repair. Assume any password requested is blank, and TAB
over.

There give
COPY D:\i386\ntfs.sys C:\Windows\system32\Drivers\ntfs.sys

(that assumes the CD drive is seen as D: which is probable; note it is
letter I, number 386)

If you have installed a Service pack, do instead
COPY C:\ServicePackFiles\i386\ntfs.sys
C:\Windows\system32\Drivers\ntfs.sys

(which will wrap here - all on one line)

 

[Del Fredricks]

I'm not sure what DDRRE thinks he is talking about KERNEL= for, but it
bears no relation I know to Windows XP

You can restore the ntfs.sys from the CD if you have *not* installed one
of the Service Packs. What you have to do is Set the BIOS to boot CD
before Hard Disk. Boot the XP CD and, instead of Setup, take the
immediate R for Repair. Assume any password requested is blank, and TAB
over.

There give
COPY D:\i386\ntfs.sys C:\Windows\system32\Drivers\ntfs.sys

(that assumes the CD drive is seen as D: which is probable; note it is
letter I, number 386)

If you have installed a Service pack, do instead
COPY C:\ServicePackFiles\i386\ntfs.sys
C:\Windows\system32\Drivers\ntfs.sys

(which will wrap here - all on one line)

The problem is that after SP2 is installed, all attempts to boot to a
checked version of XP Pro using the "/kernel=ntsokchk.exe
/hal=halchk.dll" options in a boot.ini file results in an error crying
about the "system32\drivers\ntfs.sys" being either corrupted or
missing.

SO, apparently SP2 has modified this driver to an extent that the old
checked kernel and hal longer recognize it as being valid. Thus, if
one installs SP2 you might as well kiss checked kernel execution
good-bye. A real shame for those of use developing in the kernel
world.

 

[Alex Nichol]

The problem is that after SP2 is installed, all attempts to boot to a
checked version of XP Pro using the "/kernel=ntsokchk.exe
/hal=halchk.dll" options in a boot.ini file results in an error crying
about the "system32\drivers\ntfs.sys" being either corrupted or
missing.

You probably need to go check at the Developers section on Technet or
MSDN. I seem to remember there being a checked version of SP2, but have
not had an interest in it myself